hmmm.... I'm starting to think this is not contained within the username object. Trying different names results in either name not found or not found in AD cache, etc...

When I get back to work and get time to check on it, I'll try a different approach, making the call perhaps using the RootDSE method if I can.